WAN Experts in Frankfurt

• User account management and creation in Active Directory
• Group management and updates in Active Directory
• Permissions management on file servers
• Exchange/Outlook support
• VPN setup
• System and product support: Windows 10, Windows 11, Office 2019, Office 365, Active Directory, TeamViewer, RSA VPN, Microsoft Teams, RSA Security Console, Deep Discovery Mail Inspector, ServiceNow, Macmon

• Introduction of an access control solution and preparation of a tender for a visitor management system.
• As project manager, I am responsible for the successful introduction of a cloud-based access control system at two sites with approximately 4000 employees.
• Responsible for the successful implementation of the project.
• Preparation and coordination of project plans and status reports with all stakeholders.
• Preparation/coordination of an initial effort or cost estimate and related planning for the implementation of operational services.
• Identification of interfaces.
• Compliance with the budget and schedule.
• As Tender Manager / Demand Manager, I am responsible for the following specific tasks:
• Analysis of potential providers.
• Elicitation of requirements.
• Preparation and coordination of the requirements catalog.
• Preparation of an evaluation matrix.
• Preparation of tender documents.

Europe-wide re-platforming & centralization

• Independently created the migration concept and implementation plan for the Europe-wide centralization and consolidation of IT services for around 20 European companies as part of a re-platforming program.
• Migration assessment: analysis of the existing IT, infrastructure, application, and service landscapes of the companies as the basis for the migration strategy.
• Development of the centralized target vision and target architecture based on a modern technology stack, taking platform and containerization approaches into account.
• Design of a highly available central infrastructure in an active-active model across two data centers; consideration of cloud, infrastructure, application, CMDB, and IAM services.
• Development of the migration and transformation roadmap, including defining migration waves, dependencies, requirements, and priorities for the move from decentralized services to the central platform.
• Analysis of technical and organizational dependencies, identification of migration risks, and development of a structured approach for step-by-step migration and centralization.
• Creation of target, solution, and implementation views for each service domain; design of the end-to-end join-move-leave process as a blueprint for the European rollout (Jira/Jira Asset Management).
• Alignment of migration strategy and roadmap with European companies, management, IT, providers, and other stakeholders; presentation of the 12-month roadmap to the Managing Director Europe.

• Error analysis and fixes including performance optimization of the in-house developed platform API
• Change and incident management in day-to-day operations
• Responsible for compliance with security and compliance requirements
• Vendor management for software development and maintenance
• Planning and execution of migration of legacy services to a cloud native platform

Role in the project: project staff, implementation team

Used skills: requirements analysis, IT service and application management, IT operations, error analysis and performance optimization, software maintenance and lifecycle management

Project environment: Cloud Native Platform (Kubernetes, Crossplane, AWS, ArgoCD, Grafana)

• Main point of contact for the provisioning of end devices and operating systems
• Pre-installation of software according to company guidelines and integration into the corporate network (Wi-Fi, VPN, domain)
• User support with setup, process improvements, and handling of returns (RMAs)

• Designed and specified the technical network integration of a new business critical application system (MUREX) in the capital market area in a complex interface and outsourcing environment.

• Created component specifications, catalog of measures and implementation plan.

• Ensured proper integration of developed results in accordance with the bank’s framework: IT compliance, IT security, change and release management.

• Selected and integrated a new service provider for the bank; moved critical bank applications to the provider.

• Designed, implemented and supported the new Cisco network and Fortinet security setup at the service provider data center.

• Acted as technical interface between bank, service providers and consulting partners.

• Supported and further developed the network and security infrastructure (clients, servers, networks); performed error analysis and implemented solutions within agreed service levels.

• Analyzed and diagnosed all security and network failures, glitches and malfunctions.

• Initiated continuous enhancements to guarantee efficient resource utilization and acceptable response times to users.

• Provided network support in financial service organization and operational change preparation on production banking network infrastructure for both large and small projects within strict change management discipline.

• Designed, defined, tested, governed and improved engineering standards.

• Performed role of network architect for medium-large projects involving team resources.

• Designed a network management strategy focused on NetDevOps principles and model-driven telemetry using YANG data models
• Conducted NETCONF/YANG workshops for L2VPN/L3VPN services over SRv6
• Automated configuration deployment in the testing environment with Ansible
• Developed end-to-end service measurement concepts with IPSLA and the Telegraf-Prometheus-Grafana stack
• Created the dual-stack architecture design (router + switch + firewall) including a detailed test plan; planned, executed, and documented acceptance tests for the management network
• Performed BSI IT baseline protection checks according to the IT-Grundschutz catalog (needs assessment, modeling, risk analysis, deriving measures)
• Protocols: SRv6, IPv6, MPLS, BGP, ISIS, OSPF, NETCONF/YANG, model-driven telemetry, IPSLA
• Systems: Cisco Crosswork Network Controller, SolarWinds Orion, Grafana, InfluxDB, Telegraf, Ansible, Git
• Components: Cisco NCS router series, Cisco Catalyst switch series, Cisco Firepower firewall series

Self-employed consulting, implementation, and support of IT infrastructures with a focus on IT security, network and server administration, virtualization, backup & recovery, IT documentation, asset management, and business continuity management.

• IT security consulting and implementation of technical protective measures
• Windows server and client support, patch management, user support
• M365 – Entra ID – MS Azure administration
• Planning, installation, and operation of LAN, WAN, WLAN, and VLAN infrastructures, Cisco, HP, Netgear, Sophos, Securepoint
• Support of virtual systems based on Hyper-V, VMware, and Proxmox
• Backup and recovery concepts including test recovery, documentation, and handover
• Introduction and maintenance of IT documentation, asset management, and inventory tracking
• Implementation of measures related to IT baseline protection, emergency manuals, and BCM
• On-/offboarding concepts with a focus on permissions, devices, data access, and handover processes

Security awareness and practical sensitization of users and IT staff

• Holistic responsibility for modernizing and expanding federal networks and upgrading critical data center and telecom infrastructure in the high-security agency environment of BDBOS
• Planning and management of the expansion of national BOS network infrastructure in the VS-NfD/KRITIS environment with technical decision authority at the architecture and component level (Cisco, Layer 2/3, WAN redundancy)
• Planning, tendering (EVB-IT/UVgO) and oversight of the upgrade of security-critical telecom infrastructure for emergency call 110/112 (ACD)
• Capacity planning, rack integration, structured cabling, power supply, cooling concept (CRAC/In-Row) and DCIM monitoring for data center expansion
• Building the IT department from scratch: structures, governance, processes, team recruiting, vendor selection and long-term IT strategy
• Planning and managing infrastructure and application migrations: migration strategies, batch planning, hypercare stabilization and rollback concepts
• Creating vendor-neutral specifications (telecom systems, signature solutions) according to EVB-IT and UVgO; contract award and vendor management
• Setting up a secure IT environment according to BSI basic protection, ISO 27001 and VS-NfD; developing IT security concepts and CMDB analyses
• Hands-on program leadership: decision papers for management and steering committees, risk management, reporting and change request control

• Provided coaching and support to Scrum teams to adopt and implement agile practices effectively
• Analyzed business requirements and identified IT solutions to support business goals
• Evaluated existing IT systems and processes to identify optimization opportunities
• Managed stakeholder relationships and coaching
• Facilitated Scrum ceremonies and ensured adherence to Scrum principles and practices
• Identified and implemented lean startup process optimizations to improve efficiency and effectiveness of development and business processes
• Developed and monitored daily business strategies to ensure development goals were met
• Developed and implemented OKR strategies to align team goals with company objectives
• Tools/Methodology: Jira, Confluence, Miro, PowerBI, team building & mentoring, conflict resolution, impediment resolution

• Client management
• Personnel management
• Meeting project targets
• Consulting & customer support
• Infrastructure support for medical practices
• Firewall setup
• End point protection installation and management
• Client-server infrastructure setup
• VPN installation
• Customizing, maintaining and updating existing systems and devices
• Telematics infrastructure (TI)
• VM connector configuration
• Communication in healthcare
• Activating HBA and SMC-B
• Error analysis and troubleshooting
• Employee support for industry-specific software
• Escalating tickets to 3rd level support
• Setting up card terminals (e.g. Orga, Cherry)
• EasyTI installation / configuration
• Troubleshooting & scheduling
• Deregistering old hardware/connectors
• Database management

• Set of concurrent projects (BSS/OSS related)

• Administrative coordination with providers regarding required software packages

• Review of lists submitted by providers and coordination with relevant specialist departments

• Organization of tests of newly scripted software packages in collaboration with specialist departments and providers

• Selection and designation of employees responsible for testing and scheduling software approval dates

• Documentation and filing of the release form from the specialist department

• Tracking and escalation of issues to providers

• Rollout planning at site and department level and execution of the rollout considering WAN capacity

• Ensuring that no more than half of the employees at a site or in a department are migrated at the same time

• Scheduling dependent on the availability of all required software packages

• Processing 1st, 2nd and 3rd level tickets
• Analyzing, resolving and documenting incidents and service requests within incident and SLA management via KIX (OTRS) ticket system
• Monitoring and managing networks and servers, configuring network interfaces (Wallix & Zabbix)
• Providing user support for technical issues and onboarding to new systems
• Creating and maintaining documentation for IT systems, network configurations and processes
• Software installation and maintenance: installing, configuring and updating operating systems, applications and license management (Empirum, MS365, Admin Center / Exchange)
• Data backup and tape rotation (backup and recovery)
• Configuring antivirus software and applying security updates and patches (Matrix42 patch management)
• User management: creating, modifying and deleting user accounts and their access rights (AD / Azure)